Lucene search

K
cve[email protected]CVE-2007-4188
HistoryAug 08, 2007 - 1:17 a.m.

CVE-2007-4188

2007-08-0801:17:00
CWE-384
web.nvd.nist.gov
28
cve-2007-4188
session fixation
joomla
security vulnerability
administrative web sessions
sunglow
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.

Affected configurations

NVD
Node
joomlajoomla\!Range<1.0.13
CPENameOperatorVersion
joomla:joomla\!joomla joomla!lt1.0.13

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%